
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier: Ofu3V4iaBIPzbWYGl34jJOc+ItX8UQgOFd9fCY2kCpE=
Subject key identifier: ED:0D:1E:96:72:49:F6:3A:AD:ED:AC:50:F7:A9:D5:99:A0:86:68:0C
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial: 0C56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number: 0C48
Signing time: Thu 16 Apr 2026 18:38:59 +0000
Manifest this update: Thu 16 Apr 2026 18:38:59 +0000
Manifest next update: Thu 23 Apr 2026 18:38:59 +0000
Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: JCWmbflIZzRJbNiItj6VHg1MGxW3W+j/wPNFuSs/Ok8=)
2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Validity
Not Before: Apr 16 18:38:59 2026 GMT
Not After : Apr 23 18:38:59 2026 GMT
Subject: CN=69e12cc3-36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:64:05:7a:e2:bc:9c:03:f4:a3:2d:39:0d:
88:c2:a8:9f:20:74:9c:26:05:c0:0c:92:fc:71:51:
c6:da:96:6c:0e:89:0a:c4:a3:fd:16:6d:3b:fc:1f:
88:fc:96:5c:cb:99:59:9f:0e:e5:b0:0a:9a:37:98:
b4:b9:8f:a9:ac:1d:c0:1d:1a:af:ce:04:0f:9b:f1:
77:26:fe:de:64:0e:d9:b9:be:fd:5c:9a:0d:a9:af:
bf:6d:64:2d:c2:14:06:5d:e6:03:37:0a:64:67:76:
bf:11:04:bc:3e:2e:89:98:0b:27:20:20:7a:b5:08:
dd:ae:00:0e:c6:70:16:67:17:05:b6:e0:c6:67:62:
a3:49:a4:ba:2e:15:be:ca:93:c1:8f:ae:c3:21:23:
e1:05:38:2e:63:82:9b:16:b8:fc:6b:c6:a6:d7:20:
21:b8:0a:7e:66:42:63:a5:36:65:d7:c9:e2:dd:fa:
bf:4e:5e:ab:cc:f4:8a:cd:bd:5c:67:89:46:a1:44:
a6:eb:a0:06:f5:f1:0c:a2:18:62:19:cb:3b:9f:b4:
e6:6b:84:e5:c1:13:a2:ee:81:df:d9:4e:d6:b0:29:
82:b3:92:ed:75:ba:43:ce:18:85:74:14:b1:9d:6b:
7e:30:03:e2:2a:b4:7b:d6:ff:90:71:33:d2:54:82:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:1E:96:72:49:F6:3A:AD:ED:AC:50:F7:A9:D5:99:A0:86:68:0C
X509v3 Authority Key Identifier:
keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:40:dd:34:ed:93:d9:2e:44:62:6e:45:cb:5f:d0:a8:d1:f5:
4b:f2:d8:08:dd:79:2d:a1:62:9b:26:eb:cf:f4:b6:99:59:97:
c6:59:bf:80:fd:24:bd:50:9d:5a:16:16:76:cc:83:c6:0c:31:
89:56:49:9e:47:19:14:ad:cb:72:a4:d2:25:5f:61:c0:33:b3:
d4:0c:71:58:38:6f:30:d9:34:29:cc:47:ee:46:85:db:c7:c6:
e1:b1:19:02:0a:88:9f:aa:47:04:77:50:28:43:ad:fc:e4:9d:
e9:ef:3b:42:e2:30:1a:83:5c:7f:5e:c2:9f:db:4f:6a:f2:b6:
16:43:af:5c:06:03:18:f2:54:93:07:34:4d:cc:a0:c9:47:6e:
e1:6c:c5:84:c9:d2:27:ef:14:43:f9:c4:42:92:cd:c0:cb:01:
ea:aa:06:45:69:6c:9f:53:75:28:66:f0:a5:ab:1f:ee:e0:d0:
ba:02:08:1c:41:40:ed:e4:c5:4e:ec:27:43:da:4c:2f:74:ab:
ef:ae:25:66:9d:dc:dd:8c:c1:42:00:aa:54:ca:b2:6c:4b:30:
96:7a:81:d5:00:20:9e:50:c0:e4:80:a3:c1:64:84:ac:0f:a8:
50:00:74:a6:73:9e:46:98:f4:3d:25:b7:14:ef:ac:c7:c4:34:
d1:fc:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:32 2026 by rpki-client